From f6617d393510244cfab78f367a7a517b9d0bbcbf Mon Sep 17 00:00:00 2001
From: Bitnami Bot <bitnami.bot@broadcom.com>
Date: Mon, 25 May 2026 20:28:06 +0200
Subject: [PATCH] [bitnami/ghost] Release 6.41.1-debian-12-r0 (#93991)

Signed-off-by: Bitnami Bot <bitnami.bot@broadcom.com>
---
 bitnami/ghost/6/debian-12/Dockerfile          | 10 ++---
 .../prebuildfs/opt/bitnami/scripts/libfile.sh | 37 +++++++++++++++++++
 2 files changed, 42 insertions(+), 5 deletions(-)

diff --git a/bitnami/ghost/6/debian-12/Dockerfile b/bitnami/ghost/6/debian-12/Dockerfile
index bcb221753619..5cdb844aa866 100644
--- a/bitnami/ghost/6/debian-12/Dockerfile
+++ b/bitnami/ghost/6/debian-12/Dockerfile
@@ -7,13 +7,13 @@ ARG DOWNLOADS_URL="downloads.bitnami.com/files/stacksmith"
 ARG TARGETARCH
 
 LABEL org.opencontainers.image.base.name="docker.io/bitnami/minideb:bookworm" \
-      org.opencontainers.image.created="2026-05-25T08:19:21Z" \
+      org.opencontainers.image.created="2026-05-25T17:50:51Z" \
       org.opencontainers.image.description="Application packaged by Broadcom, Inc." \
       org.opencontainers.image.documentation="https://github.com/bitnami/containers/tree/main/bitnami/ghost/README.md" \
       org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/ghost" \
       org.opencontainers.image.title="ghost" \
       org.opencontainers.image.vendor="Broadcom, Inc." \
-      org.opencontainers.image.version="6.41.0"
+      org.opencontainers.image.version="6.41.1"
 
 ENV HOME="/" \
     OS_ARCH="${TARGETARCH:-amd64}" \
@@ -32,7 +32,7 @@ RUN --mount=type=secret,id=downloads_url,env=SECRET_DOWNLOADS_URL \
       "python-3.12.13-11-linux-${OS_ARCH}-debian-12" \
       "node-22.22.3-0-linux-${OS_ARCH}-debian-12" \
       "mysql-client-12.2.2-0-linux-${OS_ARCH}-debian-12" \
-      "ghost-6.41.0-0-linux-${OS_ARCH}-debian-12" \
+      "ghost-6.41.1-0-linux-${OS_ARCH}-debian-12" \
     ) ; \
     for COMPONENT in "${COMPONENTS[@]}"; do \
       if [ ! -f "${COMPONENT}.tar.gz" ]; then \
@@ -51,9 +51,9 @@ RUN find / -perm /6000 -type f -exec chmod a-s {} \; || true
 COPY rootfs /
 RUN /opt/bitnami/scripts/ghost/postunpack.sh
 RUN /opt/bitnami/scripts/mysql-client/postunpack.sh
-ENV APP_VERSION="6.41.0" \
+ENV APP_VERSION="6.41.1" \
     BITNAMI_APP_NAME="ghost" \
-    IMAGE_REVISION="2" \
+    IMAGE_REVISION="0" \
     PATH="/opt/bitnami/common/bin:/opt/bitnami/python/bin:/opt/bitnami/node/bin:/opt/bitnami/mysql/bin:/opt/bitnami/ghost/bin:$PATH"
 
 EXPOSE 2368 3000
diff --git a/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/scripts/libfile.sh b/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/scripts/libfile.sh
index 1c69e0e48a5d..335c1c7c9ef7 100644
--- a/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/scripts/libfile.sh
+++ b/bitnami/ghost/6/debian-12/prebuildfs/opt/bitnami/scripts/libfile.sh
@@ -139,3 +139,40 @@ wait_for_log_entry() {
         return 1
     fi
 }
+
+########################
+# Creates a secure temporary file containing the provided secret
+# Arguments:
+#   $1 - secret to write to the temporary file
+# Returns:
+#   String
+#########################
+credential_to_temp_file() {
+    local secret="$1"
+    local tmp_file
+
+    # Use mktemp with a specific prefix for easier debugging if something lingers
+    if ! tmp_file=$(mktemp "${TMPDIR:-/tmp}/at.cred.XXXXXXXX"); then
+        echo "Error: Failed to create temp file" >&2
+        return 1
+    fi
+
+    # Restrict permissions before writing the secret
+    chmod 0600 "$tmp_file"
+    # Write secret and ensure it's flushed to disk
+    printf "%s" "$secret" > "$tmp_file"
+    # Output the filename so the caller can capture it
+    echo "$tmp_file"
+}
+
+########################
+# Cleans up temporary files created by credential_to_temp_file
+# Arguments:
+#   None
+# Returns:
+#   None
+#########################
+cleanup_credentials() {
+    debug "Cleaning up temporary files containing credentials"
+    rm -rf "${TMPDIR:-/tmp}"/at.cred.*
+}